Red Hat Security Advisory: flatpak security update
An update for flatpak is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-21381US | high8.2 | — | ||
Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. In Flatpack since version 0.9.4 and before version 1.10.2 has a vulnerability i… | ||||
references
External citations — patches, advisories, analysis.
remediations (50)
- Fixedflatpak-0:1.0.9-4.el8_1.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.1)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1074 - Fixedflatpak-0:1.0.9-4.el8_1.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.1)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1074 - Fixedflatpak-0:1.0.9-4.el8_1.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.1)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1074 - Fixedflatpak-0:1.0.9-4.el8_1.src as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.1)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1074 - Fixedflatpak-0:1.0.9-4.el8_1.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.1)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1074 - Fixedflatpak-debuginfo-0:1.0.9-4.el8_1.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.1)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1074 - Fixedflatpak-debuginfo-0:1.0.9-4.el8_1.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.1)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1074 - Fixedflatpak-debuginfo-0:1.0.9-4.el8_1.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.1)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1074 - Fixedflatpak-debuginfo-0:1.0.9-4.el8_1.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.1)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1074 - Fixedflatpak-debuginfo-0:1.0.9-4.el8_1.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.1)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1074 - Fixedflatpak-debugsource-0:1.0.9-4.el8_1.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.1)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1074 - Fixedflatpak-debugsource-0:1.0.9-4.el8_1.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.1)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1074 - Fixedflatpak-debugsource-0:1.0.9-4.el8_1.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.1)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1074 - Fixedflatpak-debugsource-0:1.0.9-4.el8_1.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.1)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1074 - Fixedflatpak-debugsource-0:1.0.9-4.el8_1.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.1)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1074 - Fixedflatpak-libs-0:1.0.9-4.el8_1.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.1)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1074 - Fixedflatpak-libs-0:1.0.9-4.el8_1.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.1)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1074 - Fixedflatpak-libs-0:1.0.9-4.el8_1.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.1)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1074 - Fixedflatpak-libs-0:1.0.9-4.el8_1.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.1)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1074 - Fixedflatpak-libs-0:1.0.9-4.el8_1.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.1)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1074 - Fixedflatpak-libs-debuginfo-0:1.0.9-4.el8_1.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.1)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1074 - Fixedflatpak-libs-debuginfo-0:1.0.9-4.el8_1.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.1)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1074 - Fixedflatpak-libs-debuginfo-0:1.0.9-4.el8_1.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.1)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1074 - Fixedflatpak-libs-debuginfo-0:1.0.9-4.el8_1.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.1)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1074 - Fixedflatpak-libs-debuginfo-0:1.0.9-4.el8_1.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.1)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1074 - Workaroundflatpak-0:1.0.9-4.el8_1.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.1)
Avoid installing Flatpak apps from untrusted sources, or check the contents of the exported .desktop files in exports/share/applications/*.desktop (typically ~/.local/share/flatpak/exports/share/applications/*.desktop and /var/lib/flatpak/exports/share/applications/*.desktop) to make sure that literal filenames do not follow @@ or @@u.
- Workaroundflatpak-0:1.0.9-4.el8_1.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.1)
Avoid installing Flatpak apps from untrusted sources, or check the contents of the exported .desktop files in exports/share/applications/*.desktop (typically ~/.local/share/flatpak/exports/share/applications/*.desktop and /var/lib/flatpak/exports/share/applications/*.desktop) to make sure that literal filenames do not follow @@ or @@u.
- Workaroundflatpak-0:1.0.9-4.el8_1.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.1)
Avoid installing Flatpak apps from untrusted sources, or check the contents of the exported .desktop files in exports/share/applications/*.desktop (typically ~/.local/share/flatpak/exports/share/applications/*.desktop and /var/lib/flatpak/exports/share/applications/*.desktop) to make sure that literal filenames do not follow @@ or @@u.
- Workaroundflatpak-0:1.0.9-4.el8_1.src as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.1)
Avoid installing Flatpak apps from untrusted sources, or check the contents of the exported .desktop files in exports/share/applications/*.desktop (typically ~/.local/share/flatpak/exports/share/applications/*.desktop and /var/lib/flatpak/exports/share/applications/*.desktop) to make sure that literal filenames do not follow @@ or @@u.
- Workaroundflatpak-0:1.0.9-4.el8_1.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.1)
Avoid installing Flatpak apps from untrusted sources, or check the contents of the exported .desktop files in exports/share/applications/*.desktop (typically ~/.local/share/flatpak/exports/share/applications/*.desktop and /var/lib/flatpak/exports/share/applications/*.desktop) to make sure that literal filenames do not follow @@ or @@u.
- Workaroundflatpak-debuginfo-0:1.0.9-4.el8_1.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.1)
Avoid installing Flatpak apps from untrusted sources, or check the contents of the exported .desktop files in exports/share/applications/*.desktop (typically ~/.local/share/flatpak/exports/share/applications/*.desktop and /var/lib/flatpak/exports/share/applications/*.desktop) to make sure that literal filenames do not follow @@ or @@u.
- Workaroundflatpak-debuginfo-0:1.0.9-4.el8_1.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.1)
Avoid installing Flatpak apps from untrusted sources, or check the contents of the exported .desktop files in exports/share/applications/*.desktop (typically ~/.local/share/flatpak/exports/share/applications/*.desktop and /var/lib/flatpak/exports/share/applications/*.desktop) to make sure that literal filenames do not follow @@ or @@u.
- Workaroundflatpak-debuginfo-0:1.0.9-4.el8_1.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.1)
Avoid installing Flatpak apps from untrusted sources, or check the contents of the exported .desktop files in exports/share/applications/*.desktop (typically ~/.local/share/flatpak/exports/share/applications/*.desktop and /var/lib/flatpak/exports/share/applications/*.desktop) to make sure that literal filenames do not follow @@ or @@u.
- Workaroundflatpak-debuginfo-0:1.0.9-4.el8_1.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.1)
Avoid installing Flatpak apps from untrusted sources, or check the contents of the exported .desktop files in exports/share/applications/*.desktop (typically ~/.local/share/flatpak/exports/share/applications/*.desktop and /var/lib/flatpak/exports/share/applications/*.desktop) to make sure that literal filenames do not follow @@ or @@u.
- Workaroundflatpak-debuginfo-0:1.0.9-4.el8_1.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.1)
Avoid installing Flatpak apps from untrusted sources, or check the contents of the exported .desktop files in exports/share/applications/*.desktop (typically ~/.local/share/flatpak/exports/share/applications/*.desktop and /var/lib/flatpak/exports/share/applications/*.desktop) to make sure that literal filenames do not follow @@ or @@u.
- Workaroundflatpak-debugsource-0:1.0.9-4.el8_1.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.1)
Avoid installing Flatpak apps from untrusted sources, or check the contents of the exported .desktop files in exports/share/applications/*.desktop (typically ~/.local/share/flatpak/exports/share/applications/*.desktop and /var/lib/flatpak/exports/share/applications/*.desktop) to make sure that literal filenames do not follow @@ or @@u.
- Workaroundflatpak-debugsource-0:1.0.9-4.el8_1.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.1)
Avoid installing Flatpak apps from untrusted sources, or check the contents of the exported .desktop files in exports/share/applications/*.desktop (typically ~/.local/share/flatpak/exports/share/applications/*.desktop and /var/lib/flatpak/exports/share/applications/*.desktop) to make sure that literal filenames do not follow @@ or @@u.
- Workaroundflatpak-debugsource-0:1.0.9-4.el8_1.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.1)
Avoid installing Flatpak apps from untrusted sources, or check the contents of the exported .desktop files in exports/share/applications/*.desktop (typically ~/.local/share/flatpak/exports/share/applications/*.desktop and /var/lib/flatpak/exports/share/applications/*.desktop) to make sure that literal filenames do not follow @@ or @@u.
- Workaroundflatpak-debugsource-0:1.0.9-4.el8_1.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.1)
Avoid installing Flatpak apps from untrusted sources, or check the contents of the exported .desktop files in exports/share/applications/*.desktop (typically ~/.local/share/flatpak/exports/share/applications/*.desktop and /var/lib/flatpak/exports/share/applications/*.desktop) to make sure that literal filenames do not follow @@ or @@u.
- Workaroundflatpak-debugsource-0:1.0.9-4.el8_1.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.1)
Avoid installing Flatpak apps from untrusted sources, or check the contents of the exported .desktop files in exports/share/applications/*.desktop (typically ~/.local/share/flatpak/exports/share/applications/*.desktop and /var/lib/flatpak/exports/share/applications/*.desktop) to make sure that literal filenames do not follow @@ or @@u.
- Workaroundflatpak-libs-0:1.0.9-4.el8_1.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.1)
Avoid installing Flatpak apps from untrusted sources, or check the contents of the exported .desktop files in exports/share/applications/*.desktop (typically ~/.local/share/flatpak/exports/share/applications/*.desktop and /var/lib/flatpak/exports/share/applications/*.desktop) to make sure that literal filenames do not follow @@ or @@u.
- Workaroundflatpak-libs-0:1.0.9-4.el8_1.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.1)
Avoid installing Flatpak apps from untrusted sources, or check the contents of the exported .desktop files in exports/share/applications/*.desktop (typically ~/.local/share/flatpak/exports/share/applications/*.desktop and /var/lib/flatpak/exports/share/applications/*.desktop) to make sure that literal filenames do not follow @@ or @@u.
- Workaroundflatpak-libs-0:1.0.9-4.el8_1.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.1)
Avoid installing Flatpak apps from untrusted sources, or check the contents of the exported .desktop files in exports/share/applications/*.desktop (typically ~/.local/share/flatpak/exports/share/applications/*.desktop and /var/lib/flatpak/exports/share/applications/*.desktop) to make sure that literal filenames do not follow @@ or @@u.
- Workaroundflatpak-libs-0:1.0.9-4.el8_1.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.1)
Avoid installing Flatpak apps from untrusted sources, or check the contents of the exported .desktop files in exports/share/applications/*.desktop (typically ~/.local/share/flatpak/exports/share/applications/*.desktop and /var/lib/flatpak/exports/share/applications/*.desktop) to make sure that literal filenames do not follow @@ or @@u.
- Workaroundflatpak-libs-0:1.0.9-4.el8_1.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.1)
Avoid installing Flatpak apps from untrusted sources, or check the contents of the exported .desktop files in exports/share/applications/*.desktop (typically ~/.local/share/flatpak/exports/share/applications/*.desktop and /var/lib/flatpak/exports/share/applications/*.desktop) to make sure that literal filenames do not follow @@ or @@u.
- Workaroundflatpak-libs-debuginfo-0:1.0.9-4.el8_1.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.1)
Avoid installing Flatpak apps from untrusted sources, or check the contents of the exported .desktop files in exports/share/applications/*.desktop (typically ~/.local/share/flatpak/exports/share/applications/*.desktop and /var/lib/flatpak/exports/share/applications/*.desktop) to make sure that literal filenames do not follow @@ or @@u.
- Workaroundflatpak-libs-debuginfo-0:1.0.9-4.el8_1.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.1)
Avoid installing Flatpak apps from untrusted sources, or check the contents of the exported .desktop files in exports/share/applications/*.desktop (typically ~/.local/share/flatpak/exports/share/applications/*.desktop and /var/lib/flatpak/exports/share/applications/*.desktop) to make sure that literal filenames do not follow @@ or @@u.
- Workaroundflatpak-libs-debuginfo-0:1.0.9-4.el8_1.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.1)
Avoid installing Flatpak apps from untrusted sources, or check the contents of the exported .desktop files in exports/share/applications/*.desktop (typically ~/.local/share/flatpak/exports/share/applications/*.desktop and /var/lib/flatpak/exports/share/applications/*.desktop) to make sure that literal filenames do not follow @@ or @@u.
- Workaroundflatpak-libs-debuginfo-0:1.0.9-4.el8_1.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.1)
Avoid installing Flatpak apps from untrusted sources, or check the contents of the exported .desktop files in exports/share/applications/*.desktop (typically ~/.local/share/flatpak/exports/share/applications/*.desktop and /var/lib/flatpak/exports/share/applications/*.desktop) to make sure that literal filenames do not follow @@ or @@u.
- Workaroundflatpak-libs-debuginfo-0:1.0.9-4.el8_1.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.1)
Avoid installing Flatpak apps from untrusted sources, or check the contents of the exported .desktop files in exports/share/applications/*.desktop (typically ~/.local/share/flatpak/exports/share/applications/*.desktop and /var/lib/flatpak/exports/share/applications/*.desktop) to make sure that literal filenames do not follow @@ or @@u.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan